Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2003-1089 1 Phpoutsourcing 1 Zorum 2025-04-03 N/A
index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.
CVE-2005-0676 1 Phpoutsourcing 1 Zorum 2025-04-03 N/A
index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability.
CVE-2005-2651 1 Phpoutsourcing 1 Zorum 2025-04-03 N/A
gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.